openstack
/
magnum
Code Issues Proposed changes

Enable SELinux in swarm bay 

SELinux is an important security features. We need to turn it on
after cloud-init. This patch did that for swarm.

Change-Id: I1862a63498613535741c3aae9c0378911ec21315
Partial-Bug: #1543308
This commit is contained in:
Hongbin Lu 2016-03-08 14:26:24 -05:00
parent f3f99577dc
commit 44b2e77979
2 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
magnum/templates/swarm/fragments/disable-selinux.sh
View File

@ -2,7 +2,3 @@
#!/bin/sh #!/bin/sh
setenforce 0 setenforce 0
sed -i '
/^SELINUX=/ s/=.*/=permissive/
' /etc/selinux/config

2
magnum/templates/swarm/fragments/enable-services.sh
View File

@ -7,3 +7,5 @@ for service in $NODE_SERVICES; do
systemctl enable $service systemctl enable $service
systemctl --no-block start $service systemctl --no-block start $service
done done
setenforce 1